---
typeId: req
recordId: benac-trust-002
fields:
  title: Trust is scoped
  statement: >-
    A trust decision shall be scoped.

    Trust scope shall identify the package CID, package interface identifiers,
    descriptor snapshot CID or descriptor scope where relevant, invocation contract
    snapshot CID where relevant, allowed data classes, granted capability identifiers,
    issuer principal, authentication context where relevant, expiration or revocation
    metadata where relevant, and evidence relied upon.

    A trust decision shall not grant authority outside its recorded scope.

    A trust decision shall not be inferred from package import, package name, author
    name, provider name, model name, package label, file name, URL, or human-readable
    description.

    A trust decision shall not classify packages.

    A trust decision shall not classify how package work is performed.
  rationale: >-
    Trust must be exact enough to prevent authority from leaking across packages,
    interfaces, descriptor scopes, data classes, capabilities, or invocation contracts.
  verification: >-
    Scope substitution tests fail closed when package CID, interface identifier,
    descriptor scope, invocation contract snapshot, data class, or capability differs
    from the trust decision.
  testable: true
  status: draft
  area: BENAC-TRUST
  sourceDocument: user-requested schema-first requirements cleanup
  sourceVersion: 2026-05-06
  sourceSections:
    - Trust, policy, and capability model
  order: 89
---
